Find a story
Search Spins
Search titles, summaries, and missing voices across published articles — press releases, announcements, and media coverage.
5 results for “command injection”
Attackers Exploit Arista VeloCloud Orchestrator Command Injection Flaw
A critical command injection vulnerability (CVE-2026-16812, CVSS 10.0) in Arista’s on-premises VeloCloud Orchestrator is being actively exploited, enabling remote arbitrary code execution.
Jul 28, 2026
Arista patches VeloCloud Orchestrator zero-day exploited in attacks
Arista released a security patch for a critical, actively exploited command injection vulnerability in its on-premises VeloCloud Orchestrator software.
Jul 28, 2026
Zimbra Patches Critical SNMP Command Injection and Four XSS Vulnerabilities
Zimbra released version 10.1.20 to patch nine security vulnerabilities, including a critical SNMP command injection flaw that could allow remote code execution when SNMP notifications are enabled.
Jul 21, 2026
CVE-2026-25089: FortiSandbox unauthenticated command injection added to CISA KEV
A vulnerability in FortiSandbox (CVE-2026-25089) enabling unauthenticated command injection was added to CISA’s Known Exploited Vulnerabilities (KEV) catalog, signaling active exploitation and mandating federal remediation.
Jul 17, 2026
Ubiquiti warns of new max severity UniFi OS vulnerability
Ubiquiti issued security patches for seven critical vulnerabilities in UniFi OS, including one rated maximum severity that enables remote command injection.
Jul 9, 2026